Our cloud infrastructure
Frontier cyber models
For fast-moving startups only
Build at agent speed.
Zero handles security.
We investigate your code, verify vulnerabilities and prepare auto-fixes in new PRs so you can keep shipping at the same pace.
I've got this.
Peace of mind.
Connect repos Keep testing Auto-fixes as PRsNo dashboard to babysit.
Set it up once.
Then get back to building.
Security in the background
- No dashboard to watch.
- No scans to start.
- You build.
Zero finds and fixes.
- He studies your style
- He makes a testing plan
Zero runs this schedule automatically.
Illustrative testing schedule
Always-on coverage
- Code reviews
- Every PR / push
- Full-codebase scans
- Daily
- Secrets checks
- Every push
- Monitoring
- Threat & CVE alerts
Auto-scheduled tests
- Source code scans
- Daily
- Website & APIs
- Weekly + major releases
- Dependencies
- Weekly
- Cloud & infrastructure
- Every 2 weeks
Daily scans run overnight when code changes.
- He finds problems
- He fixes them
- He tells youor your agent.
- He gets better
This is what closes the loop. Finally.
Your agent already writes software.
Now it can help secure it, too.
Every investigation
builds on the last.
Context about your code, architecture and past findings carries into the next investigation. As your software changes, that context helps guide what to test next.
You choose where your infrastructure and AI run.
We choose the models.
Your own tenant
Stays in your cloud
We are in the cyber programs of
Anthropic
Cyber Verification Program
OpenAI Daybreak
Trusted Access for Cyber
Microsoft
Security Advisor
The cute part is optional. The research isn't.
Small teammate.
Serious research.
We find novel vulnerabilities in real software and work with maintainers on fixes. You can read the public evidence.
Engineers at these companies reviewed fixes we submitted.
CriticalRX buffer overflow on zero-length serial framesLinux kernel · mctp
CVE-2026-68124 · CNA 9.6 CriticalCriticalArbitrary code execution via crafted expressionsjsonata
CVE-2026-77413 · GHSA-8gq3-vp5j-2grpCriticalCross-tenant agent API-token minting@paperclipai/server
MediumAnonymous /api/systemstatus leaks exception detailSwiss Federal Chancellery · government code
HighSlab use-after-free in AEAD decrypt completionLinux kernel · TIPC
CVE-2026-63801HighUse-after-free in MACsec offload RXLinux kernel · mlx5e
CVE-2026-72072HighMissing CAP_NET_ADMIN check on changelinkLinux kernel · vxlan / geneve
CVE-2026-68142 + CVE-2026-68432HighOOB read on frames shorter than the auth tagLinux kernel · mac802154
CVE-2026-68125HighMemory corruption in 802.15.4 llsec decryptLinux kernel · mac802154
CVE-2026-63831HighUse-after-free of metadata_dst in eswitch repr releaseLinux kernel · ice
Queued upstreamHighResource-exhaustion denial of servicejsonata
CVE-2026-52746HighUse-after-free in LE Audio CIG/CIS setupLinux kernel · Bluetooth
CVE-2026-63944HighStack buffer overflow in NFC digitalLinux kernel · NFC
CVE-2026-80803HighDouble-completion / double-free on resumeLinux kernel · xen-blkfront
Merged upstreamHighCertificate-chain validation bypassnode-forge
HighDenial of service via unbounded recursionprotobuf.js
HighInteger overflow in HTTP chunked-transfer parser → heap OOB readnng (nanomsg)
HighOOB from unvalidated ioctl buffer sizesLinux kernel · atomisp
In reviewHighUse-after-free on inrange_timer at teardownLinux kernel · HID uclogic
In reviewHighStale pen_input pointer on partial registrationLinux kernel · HID uclogic
In reviewHighUse-after-free of in-use VP9 framesLinux kernel · meson vdec
In reviewMediumOOB read on LLCP PDUs shorter than the headerLinux kernel · NFC
CVE-2026-80798CVSS pendingNULL-deref DoS paths via AMDXDNA_EXEC_CMDLinux kernel · amdxdna
CVE-2026-72091 + CVE-2026-72092CVSS pendingOOB read from assoc length underflowLinux kernel · ath6kl
CVE-2026-89524CVSS pendingNULL deref on HT-cap without HT-oper in TDLSLinux kernel · mwifiex
CVE-2026-68197CVSS pendingOut-of-bounds read from unset MAC header on packet-socket TXLinux kernel · net/packet
CVE-2026-74667MediumOOB read in LLCP connect_sn TLV walkLinux kernel · NFC
CVE-2026-80800MediumOOB read in st21nfca ATR_REQ handlingLinux kernel · NFC
CVE-2026-80823CVSS pendingOOB read from unvalidated directory-index countsLinux kernel · ocfs2
CVE-2026-89492CVSS pendingUse-after-free from carrier_work rearm on disconnectLinux kernel · ipheth
CVSS pendingUse-after-free of ghl_poke_timer / ghl_urb at driver unbindLinux kernel · HID sony
MediumHeap out-of-bounds write in ciscodump extcapWireshark
MediumTemplate injection → arbitrary file readUptime Kuma
MediumStack overflow via deeply nested collectionsyaml
MediumOut-of-bounds read in LLCP SNL TLV parserLinux kernel · NFC
Merged upstreamMediumInteger overflow in frame-size calculationLinux kernel · atomisp
In reviewMediumOOB read from unvalidated AV1 frame indicesLinux kernel · v4l2-ctrls
In reviewMediumOOB in NPU cmdstream tile validationLinux kernel · accel/ethosu
In reviewMediumOOB read in firmware-request handlerLinux kernel · Bluetooth btnxpuart
In reviewMediumOOB read in HT/VHT capability IE parsingLinux kernel · mwifiex
In reviewMediumOOB read in pairwise-cipher OUI walkLinux kernel · mwifiex
In reviewMediumECRED deferred-recvmsg race → list corruptionLinux kernel · Bluetooth L2CAP
In reviewMediumOOB read in port100 frame length handlingLinux kernel · NFC
In reviewLowReachable WARN DoS in rsa-pkcs1pad empty digestLinux kernel · crypto
Queued upstreamA sample of what we've found. More are disclosed continuously, and others stay under embargo and NDA.
A few things worth knowing.
How does this fit our agent workflow?
Keep building with your coding agents. 0.security investigates your codebase and opens fix PRs for your engineers or agents to review.
What access does 0.security need?
We need access to the repositories and systems you want us to test. Together, we agree the scope and permissions before testing starts.
Talk through access requirementsWho reviews and merges the fixes?
Your team does. Findings come with evidence, and fix PRs give you a proposed change to review. Running a test or opening a PR does not change production. Enterprise adds independent verification of the fixes.
Explore EnterpriseDo we need to keep checking a dashboard?
No dashboard babysitting. Once you approve the scope, schedule and budget, we run the agreed testing and bring findings and fix PRs into your workflow. You stay involved in review and decisions that need your attention.
What does it cost after the first test?
Your first security test is free. We learn your software, stack and development pace, then recommend the ongoing work, schedule and usage-based price. You approve the budget before paid work begins.
See pricingWhat can you test today?
Start by connecting the source code you want tested. Our agents investigate how your software could be exploited, verify vulnerabilities and prepare auto-fixes as PRs. For a broader testing scope, talk to our team about the targets and access you can provide.
Discuss a testing scopeWant to run it yourself? Explore the free, open-source harness.
You provide the models and infrastructure.